Notarization service down?

It looks like notarization submissions stopped going through. According to notarytool logs, the package gets successfully uploaded but processing never finishes.

Our current timeout is 30 minutes. After 30 minutes of silence we see:

*** Package "package-name" was REJECTED by notary service!

The status of notary service looks green on the service status page: https://developer.apple.com/system-status/. But it does not seem to be the case in reality.

Post not yet marked as solved Up vote post of ArthurValiev Down vote post of ArthurValiev
1.4k views
  • We are seeing the same issue.

Add a Comment

Replies

I am seeing timeouts today. 3600 secs!

It looks like notarization submissions stopped going through.

Yep. Something is definitely borked. The notary service folks are aware of the issue and are investigating.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

With the time outs from the timestamp server causing Codesign to crash and now the notarization broken(more time out issues!), It's been impossible to get a stable nightly build for some time. Apple please fix your time out issues!

@eskimo, it seems notary service is back in action. Managed to notarize our packages successfully. Thanks for the assist!

Add a Comment

Unfortunately its still not working for me. I'm still seeing timeout errors.

stderr is: 2022-08-17 08:25:53.760 altool[22605:336679] *** Error: Connection failed! Error Message - The request timed out.
17-Aug-2022 09:25:55	2022-08-17 08:25:55.747 altool[22605:336678] *** Error: Unable to validate your application. We are unable to create an authentication session.

If I run it a second time I might get a bit further. The file uploads but times out when requesting status:

42:22	Requesting notarization of installer jdm_3.14.0.32_jdmx_x64.pkg ...
17-Aug-2022 09:46:26	
17-Aug-2022 09:46:26	No errors uploading.
17-Aug-2022 09:46:26	
17-Aug-2022 09:46:26	Requesting notarization status of installer jdm_3.14.0.32_jdmx_x64.pkg ...
17-Aug-2022 09:46:26	
17-Aug-2022 09:46:26	Checking Status
17-Aug-2022 09:47:27	in progress ...
17-Aug-2022 09:47:37	ERROR: Nortarization of jdm_3.14.0.32_jdmx_x64.pkg failed with exception:
17-Aug-2022 09:47:37	exit
17-Aug-2022 09:47:37	
17-Aug-2022 09:47:37	stderr is: 2022-08-17 08:47:36.805 altool[24600:344795] *** Error: Connection failed! Error Message - The request timed out.
17-Aug-2022 09:47:37	2022-08-17 08:47:37.437 altool[24600:344792] *** Error: Apple Services operation failed. Your Apple ID or password was entered incorrectly

Note I'm on an old version of macOS: Mojave, Xcode: 10.2.1, altool: 1.1.1138

AFAIK the notary service is back up and running again. I ran a test here just now — actually two, one for notarytool and another for altool — and both worked just fine. Also, if there were widespread problems it’s likely I would’ve seen more complaints here on DevForums.

It’s possible that this issue is limited to folks who authenticate with an app-specific password. For… well… reasons, I can only authenticate with an App Store Connect API key.

Try this:

% xcrun altool --list-providers CCC

replacing CCC with your credentials. Does that work?


On another note, regarding this:

I'm on an old version of macOS: Mojave, Xcode: 10.2.1, altool: 1.1.1138

You’ll need to update to notarytool in the medium term. Apple has announced that we’re discontinuing the server-side support for altool in “Fall 2023”. Unfortunately notarytool is not compatible with macOS 10.14, so you’ll need a Mac with at least macOS 10.15.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

We are authenticating using an app-specific password. This had been working fine for years until around August 5. That's when all of the time out and authentication issues started.

I was able to install Xcode 11.3 which is still compatible with Mojave. That got me access to altool v4.00.1181.

Running xcrun altool --list-providers using the app-specific password on altool v4.00.1181 works and returns the ProviderName, ProviderShortname, PublicID, and WWDRTeamID. The --list-providers option is not supported on altool v1.1.1138.

When trying to notarize using altool v4.00.1181 using the app-specific password, I get the following error: `stderr is: 2022-08-18 09:08:56.753 altool[89199:2073775] *** Error: Connection failed! Error Message - The request timed out.

2022-08-18 09:08:56.893 altool[89199:2073773] *** Error: Unable to get authorization for username 'xxxx' and password provided. Unable to upload your app for notarization.`

I guess my next move is to switch to an API key for authentication and see if that fixes it.